---
name: "rnbyc"
section: "1"
platform: "linux"
package: "rhonabwy"
version: "1.1.13-3"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/rnbyc"
---

# rnbyc(1)

JWK and JWT parser and generator

## NAME

rnbyc - JWK and JWT parser and generator

## DESCRIPTION

rnbyc - JWK/JWKS parser and generator, JWT parser and serializer, supports signed, encrypted and nested JWTs

Version 1.1.8

## COPYRIGHT

Copyright 2020-2022 Nicolas Mora \<mail@babelouest.org\>

This program is free software; you can redistribute it and/or modify it under the terms of the GPL 3

Command-line options:

**-j** **--jwks**

-

  Action: JWKS, parse or generate keys and output JWKS

**-g** **--generate** \<type\>

-

  Generate a key pair or a symmetric key \<type\> - values available: RSA\[key size\] (default key size: 4096), EC256, EC384, EC521, Ed25519, Ed448, X25519, X448, oct\[key size\] (default key size: 128 bits)

**-i** **--stdin**

-

  Reads key to parse from stdin

**-f** **--in-file**

-

  Reads key to parse from a file

**-k** **--key-id**

-

  Specifies the key-id to add to the current key

**-a** **--alg**

-

  Action: JWKS - Specifies the alg value to add to the current key Action: Serialize - Specifies the alg value to sign the token

**-e** **--enc**

-

  Specifies the enc value to encrypt the token (default A128CBC)

**-l** **--enc-alg**

-

  Specifies the encryption algorithm for key management of the token

**-o** **--out-file**

-

  Specifies the output file for the private keys (or all the keys if no public file is specified) in the JWKS

**-p** **--out-file-public**

-

  Specifies the output file for the public keys in the JWKS

**-n** **--indent**

-

  JWKS output spaces indentation: 0 is compact mode, default is 2 spaces indent

**-F** **--format**

-

  Output format, values available are JWK (default), PEM or DER

**-x** **--split**

-

  Split JWKS output in public and private keys

**-t** **--parse-token**

-

  Action: Parse token

**-s** **--serialize-token**

-

  Action: serialize given claims in a token

**-H** **--header**

-

  Display header of a parsed token

**-C** **--claims**

-

  Display claims of a parsed token, default true

**-P** **--public-key**

-

  Specifies the public key for key management encryption or signature verification Public key must be in JWKS format and can be either a JWKS string or a path to a JWKS file

**-K** **--private-key**

-

  Specifies the private key for key management decryption or signature generation Public key must be in JWKS format and can be either a JWKS string or a path to a JWKS file

**-S** **--self-signed**

-

  Verifies the JWT signature if the signed JWT has its public key included in its header as 'jwk', 'x5c' or 'x5u' parameter

**-W** **--password**

-

  Specifies the password for key management encryption/decryption using PBES2 alg or signature generation/verification using HS alg

**-u** **--x5u-flags**

-

  Set x5u flags to retrieve online certificate, values available are:

-

  cert: ignore server certificate errors (self-signed, expired, etc.) follow: follow jwks\_uri redirection if any values can be contatenated, e.g. **--x5u-flags** cert,follow

**-v** **--version**

-

  Print rnbyc's current version

**-h** **--help**

-

  Print this message

**-d** **--debug**

-

  Display debug messages

## SEE ALSO

The full documentation for **rnbyc** is maintained as a Texinfo manual.  If the **info** and **rnbyc** programs are properly installed at your site, the command

-

  **info rnbyc**

should give you access to the complete manual.